Comments for missmiis

Comment on Disable – Delete by Carol

Carol — Fri, 04 Dec 2009 16:45:06 +0000

Actually I think you’re right. Deletions can be triggered in a delta sync – but not in this case where the object has been sitting there unchanged for some time. Good catch!

Comment on Disable – Delete by mmacdonell

mmacdonell — Fri, 04 Dec 2009 16:08:45 +0000

Carol, great post! One question though…

You mentioned in the comments that the final deprovision occurs during a delta sync. However, I must be missing something since a delta sync on the disabled object will never occur unless something changes on the Active Directory side to cause the account to be imported during a delta import.

Could you elaborate on how the delta sync on the object is being triggered?

Comment on AD Group members by Carol

Carol — Mon, 16 Nov 2009 19:52:17 +0000

You need to define a delta table and then you can do delta imports. See my other posts on delta tables, like this one: http://www.wapshere.com/missmiis/sql-2005-ma-export-and-delta-import

Comment on AD Group members by austin31U

austin31U — Mon, 16 Nov 2009 13:09:23 +0000

Carol,

After reading “Provisioning Based on Group Membership” it looks like the placeholders then joins on the person object is the expected behavior. This is an SQL MA that only manages (projects to mv) 6 of the default AD security groups i.e. Students, FacultyStaff, etc. The primary table lists all possible groups and users with a column called object type that determines if the object is a person or group. Groups are projected where as person objects are joined on their metaverse object. It looks like ILM for joins retrieves all the users, inserts into the Connector Space placeholders for those person objects, and then begins the joins so this behavior is expected. The network IO issue was because the client application (ILM) wasn’t processing the data fast enough for the remote sql server which kept sending the data no matter how many times the ILM server tried to slow it down. I dropped the tables on the local box, setup a DTS package to update them, and the Network IO issue has been resolved.
The question I have now is for the Delta Imports are you using just replacing the primary table with the Delta table/view or are you just using doing a Delta Synchronization?

Sorry for the big post and thanks for all the help,
Austin

Comment on AD Group members by Carol

Carol — Thu, 12 Nov 2009 15:46:00 +0000

Hi Austin,
First – are we talking about a SQL or an AD MA here?

In either case you must import the user objects as well as the group objects. It sounds to me like you might be just importing groups, in which case the placeholders are created for the missing members.

Comment on AD Group members by austin31U

austin31U — Thu, 12 Nov 2009 12:54:37 +0000

Hey Carol,

I have the exact same setup as far as the management agent but when I attempt a Full Import Full Synchronizations I have noticed that none of the person objects are set as person objects but as placeholders in the Connector Space. When we view the Account activity through the Activity Monitor on the SQL Server we see the status of Network IO or ASYN_Network_IO as the wait type. I’m watching the traffic being passed in Wireshark and it looks like the SQL server is sending out the data to fast for the ILM application to process. The question is does ILM begin performing joins on those objects immediately or does it wait until it receives all of the results from the database?

TIA,
Austin

Comment on ILM2 RC0 – Provisioning Exchange 2007 Users by busbar

busbar — Sun, 08 Nov 2009 11:34:00 +0000

Thanks carol,
After googling found your post, we are implementing the code and we will see how things goes.

Comment on ILM2 RC0 – Provisioning Exchange 2007 Users by Carol

Carol — Sun, 08 Nov 2009 08:49:08 +0000

You can use all your ILM 2007 code with FIM 2010, which will include GALsync.

For home folders see this other post on my blog: http://www.wapshere.com/missmiis/creating-user-home-directories-windows-version

Comment on ILM2 RC0 – Provisioning Exchange 2007 Users by busbar

busbar — Sun, 08 Nov 2009 08:08:37 +0000

Hi Carol,
thanks for helping me last time, I am back again with 2 questions:
- If I want to use glasync in FIM 2010, are there any guide or shall I Configure it the way we did in ILM 2007.
- I have asked on the forums for provisioning a shared folder for the user, How we can do that in ILM, do you have any clues, I am thinking about used extension rule (don’t know if it will be a metaverse or MA –can you explain for me the difference– that will be executed after the export is completed) do you have any guidelines.

Comment on ILM2 RC0 – Codeless Provisioning Step by Step by Carol

Carol — Thu, 29 Oct 2009 08:55:38 +0000

You can use only codeless sync rules, as long as you don’t want to do anything too complicated. I have a couple of import flows which I know I won’t be able to convert to codeless: one of them substitutes non-ascii characters (eg., swapping è for e) and the other one reformats telephone numbers.